Privacy

What we process

The text you paste, an optional link, and your chosen language — only to produce your result. No account is needed.

Who may receive your content

• SachBot server runs built-in safety rules on your text. Links are inspected by address only; the server never visits them.
• AI provider (currently configured: openai, if an API key is set): receives your text with phone numbers, emails and long ID/account numbers masked, plus the warning signs found. If no key is configured, SachBot runs in demo mode and nothing is sent to an AI provider.
• Source search (currently: wikipedia): when enabled, only a short, masked keyword query (max 14 words) is sent — never the full message.

Screenshots

Screenshots are read in your browser using on-device text recognition. The image itself is not uploaded to SachBot or any AI provider. The first time, your browser downloads the text-recognition engine and language data from a public CDN. You can review and edit the extracted text before checking.

Storage & retention

• Submitted messages and screenshots are not stored on our server and are not written to server logs.
• Results are marked “no-store” and are never saved in the app's offline cache.
• Rate-limiting keeps a temporary per-IP counter in memory that resets daily.
• Check history is off by default. If you turn it on, a short summary is saved only in this browser (localStorage). Turning it off or pressing “Delete all” erases it.
• Your AI provider may retain API data under its own policy; the site owner should choose a provider and settings that limit retention.

What we never do

• Ask for your OTP, PIN, password or card details.
• Read your contacts or other apps' messages, or capture your screen.
• Publish your submissions. Sharing a result only shares a short summary you choose to send.
• Claim end-to-end encryption — connections use standard HTTPS.

Contact

Questions or deletion requests: lumacore88@gmail.com